Behavioral task
behavioral1
Sample
6d3cfdf5098789f9c5378fa46f24beecbf01afff722f59d351f6ce80d44d9ede.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6d3cfdf5098789f9c5378fa46f24beecbf01afff722f59d351f6ce80d44d9ede.exe
Resource
win10v2004-20220812-en
General
-
Target
6d3cfdf5098789f9c5378fa46f24beecbf01afff722f59d351f6ce80d44d9ede
-
Size
196KB
-
MD5
0c6dfe4dc03cca401863233f15ee85aa
-
SHA1
fb8b23e66582159ada14a64a6be32af1ac8d2a02
-
SHA256
6d3cfdf5098789f9c5378fa46f24beecbf01afff722f59d351f6ce80d44d9ede
-
SHA512
3d8ce93e1d7155c8fca252a9bf10f01763b992817c1e203729ce1eb862dc0283e3a4ac6febf2981b27d7347b79fcab072a63f92057ce35a70e6a14dd628abf88
-
SSDEEP
3072:PJv4WEsA0ie1QqDYDITcyln6T6lE1MvTiz:PJv4WEsPi4DfTcyi
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6d3cfdf5098789f9c5378fa46f24beecbf01afff722f59d351f6ce80d44d9ede.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE